REST API Security: Testing and Analysis